org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service via unbounded recursion during schema parsing

A flaw was found in Apache XMLSchema. The parser does not properly restrict how deeply schema imports and includes can be nested during processing. A remote attacker could provide a crafted schema with deeply nested references, triggering unbounded recursion that exhausts the call stack. This fla...

org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service (DoS) via deeply nested schema structures

A flaw was found in Apache XMLSchema. When constructing its schema model, the parser does not restrict how deeply schema structures can be nested. A remote attacker could exploit this vulnerability by providing a crafted XML schema containing deeply nested elements, triggering uncontrolled...

org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service (DoS) via deeply nested schema structures

A flaw was found in Apache XMLSchema. When constructing its schema model, the parser does not restrict how deeply schema structures can be nested. A remote attacker could exploit this vulnerability by providing a crafted XML schema containing deeply nested elements, triggering uncontrolled...

org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service via unbounded recursion during schema parsing

A flaw was found in Apache XMLSchema. The parser does not properly restrict how deeply schema imports and includes can be nested during processing. A remote attacker could provide a crafted schema with deeply nested references, triggering unbounded recursion that exhausts the call stack. This fla...

CLEANSTART-2026-PW93836 Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows

Security vulnerability affects the spark-sc213-jdk17-py312 package. Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows...

Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities due to the use of the Apache XmlSchema package.

Summary IBM CICS TX Advanced is vulnerable to multiple vulnerabilities due to its use of the Apache XmlSchema package. IBM CICS TX Advanced has been updated with a fixed version of the Apache XmlSchema package to address these vulnerabilities. Vulnerability Details CVEID:CVE-2026-102495...

Security Bulletin: IBM TXSeries for Multiplatforms is vulnerable to multiple vulnerabilities due to the use of the Apache XmlSchema package.

Summary IBM TXSeries for Multiplatforms is vulnerable to multiple vulnerabilities due to its use of the Apache XmlSchema package. IBM TXSeries for Multiplatforms has been updated with a fixed version of the Apache XmlSchema package to address these vulnerabilities. Vulnerability Details...

Security Bulletin: IBM ApplinX is vulnerable to multiple vulnerabilities due to use of Apache WSS4J, Apache XmlSchema, and picomatch.

Summary IBM ApplinX is vulnerable to multiple vulnerabilities due to use of third-party libraries: Apache WSS4J wss4j-ws-security-common and wss4j-ws-security-dom is vulnerable to improper authentication, insufficient verification of data authenticity, authentication bypass by spoofing, improper...

CVE-2026-102496

A flaw was found in Apache XMLSchema. When constructing its schema model, the parser does not restrict how deeply schema structures can be nested. A remote attacker could exploit this vulnerability by providing a crafted XML schema containing deeply nested elements, triggering uncontrolled...

CVE-2026-102495

A flaw was found in Apache XMLSchema. The parser does not properly restrict how deeply schema imports and includes can be nested during processing. A remote attacker could provide a crafted schema with deeply nested references, triggering unbounded recursion that exhausts the call stack. This fla...

CVE-2026-102495

Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

CVE-2026-102496

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

CVE-2026-102497

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2026-102497 Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2026-102497

The Apache XmlSchema walker (xmlschema-walker) is vulnerable to a denial of service because it fails to detect cycles in type derivation, substitution groups, model groups, or attribute groups. A malicious schema containing such cycles can cause the walker to recurse indefinitely until a stack ov...

EUVD-2026-88739

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2026-102497

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2026-102497 Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2026-102497 Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2026-102496 Apache XMLSchema: Denial of service through deeply nested schema structures

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...